Personally Identifiable Information Processing and Transparency (PT)
The Personally Identifiable Information Processing and Transparency family has 8 active controls in SP 800-53 release 5.2.0. “Yes” marks membership in the SP 800-53B baselines.
| Control | Title | Low | Moderate | High | Privacy |
|---|---|---|---|---|---|
| PT-1 | Policy and Procedures | Yes | |||
| PT-2 | Authority to Process Personally Identifiable Information | Yes | |||
| PT-3 | Personally Identifiable Information Processing Purposes | Yes | |||
| PT-4 | Consent | Yes | |||
| PT-5 | Privacy Notice | Yes | |||
| PT-6 | System of Records Notice | Yes | |||
| PT-7 | Specific Categories of Personally Identifiable Information | Yes | |||
| PT-8 | Computer Matching Requirements | Yes |
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.